diff --git a/modules/server/vaultwarden/default.nix b/modules/server/vaultwarden/default.nix
index 2a56031a..fc5726dc 100644
--- a/modules/server/vaultwarden/default.nix
+++ b/modules/server/vaultwarden/default.nix
@@ -10,16 +10,16 @@
   vcfg = config.services.vaultwarden.config;
   cfg = config.server.vaultwarden;
 in {
-  options = {
-    server.vaultwarden.enable = mkEnableOption "Enables vaultwarden";
-  };
-
   age.secrets.vaultwarden-env = {
     file = "${self}/secrets/vaultwarden-env.age";
     owner = "vaultwarden";
     mode = "400";
   };
 
+  options = {
+    server.vaultwarden.enable = mkEnableOption "Enables vaultwarden";
+  };
+
   config = mkIf cfg.enable {
     systemd.services.backup-vaultwarden.serviceConfig = {
       User = "root";